Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/dVeJBp__tKyi8xuuXGDrr7L9rpA.roa
File: dVeJBp__tKyi8xuuXGDrr7L9rpA.roa (raw, json)
Hash identifier: pavqcGgA7qNjgp+uyhIxt8IASt/7r1r3IBQvQqb7v/c=
Subject key identifier: 75:57:89:06:9F:FF:B4:AC:A2:F3:1B:AE:5C:60:EB:AF:B2:FD:AE:90
Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial: 0194D5B7993F2E054EE00B34922987A90894
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/dVeJBp__tKyi8xuuXGDrr7L9rpA.roa
Signing time: Wed 05 Feb 2025 10:46:06 +0000
ROA not before: Wed 05 Feb 2025 10:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204922
IP address blocks: 5.180.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:b7:99:3f:2e:05:4e:e0:0b:34:92:29:87:a9:08:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Validity
Not Before: Feb 5 10:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=755789069fffb4aca2f31bae5c60ebafb2fdae90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a2:1a:b6:95:a7:43:1b:37:0a:c0:8a:cb:17:
3d:7b:d5:66:4d:17:8f:49:d1:62:93:2b:02:63:11:
6f:df:28:9d:99:df:74:42:ba:e5:83:0c:ee:06:5c:
3f:17:5f:05:ba:b9:db:9d:eb:76:90:43:9a:f6:8c:
ea:82:e7:f7:01:96:71:fd:b9:8b:a9:ae:f8:70:77:
1b:bc:a4:b3:85:3b:17:df:9b:4c:5c:45:f7:f6:00:
ae:1b:6e:bc:d8:33:4c:a0:3d:11:f1:22:70:35:e7:
51:5e:4b:5c:fc:8a:2a:10:bf:ba:01:4b:81:95:42:
ed:42:04:32:f5:75:68:0c:e6:06:51:4a:d9:68:19:
84:55:d6:2b:4a:c4:b8:6d:ee:b7:d1:ef:c0:cb:ac:
fc:59:bd:db:33:5d:d0:ae:75:bc:d5:ec:4d:5c:5e:
7e:9a:dd:ed:cd:ea:9d:92:58:28:79:7a:d8:23:93:
48:e3:03:89:d6:a8:3b:8b:e1:91:cd:7a:67:56:ee:
cc:cb:ba:f4:05:a0:d3:f3:6e:56:38:a9:10:a8:63:
b7:17:a8:d3:d4:1e:ef:72:2b:e7:07:52:a6:1e:f1:
0c:c8:46:ba:7c:9a:7e:b6:ed:8d:70:2c:68:c5:3f:
ab:34:29:63:af:4a:0b:80:e7:5a:d0:80:fd:c2:98:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:57:89:06:9F:FF:B4:AC:A2:F3:1B:AE:5C:60:EB:AF:B2:FD:AE:90
X509v3 Authority Key Identifier:
keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/dVeJBp__tKyi8xuuXGDrr7L9rpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.140.0/22
Signature Algorithm: sha256WithRSAEncryption
35:8b:e5:ce:1b:bc:5c:e7:85:64:5d:fd:2f:73:c5:3a:e2:7f:
59:46:95:1b:f3:ee:c3:9a:2d:41:6a:a7:2c:a5:2e:01:91:65:
2d:13:ac:05:86:e2:a4:b8:5b:5a:0f:2c:cb:e9:60:77:f8:87:
ee:09:27:34:34:87:ce:ed:ed:42:6b:ab:ee:71:5a:2d:a2:11:
f7:93:f3:b8:4b:9f:66:8f:ab:32:00:4a:b0:2e:1f:c2:85:b3:
31:ab:9b:14:13:27:24:de:78:05:03:31:95:9c:5d:2f:37:e9:
fb:c3:18:74:d3:ab:64:1c:9e:9f:98:c3:79:c6:f2:be:22:5b:
03:fc:8d:e4:fd:88:58:da:a1:ad:0d:16:4a:5e:b3:c0:3c:48:
82:50:68:5e:15:7f:fb:99:5e:df:28:55:1e:c7:f8:44:78:25:
d1:a9:a7:11:a9:81:4a:cd:af:0b:e3:29:2d:80:ec:fb:5b:98:
cf:6a:91:1f:2b:a5:31:51:e6:61:f1:9d:11:84:07:fd:d1:0a:
53:7c:8e:b5:b2:7f:14:a2:b5:6b:6a:05:10:b3:04:98:02:af:
90:05:b5:b9:2b:19:9d:ab:a2:bb:e2:c1:e7:09:ad:15:7b:8d:
62:9f:f2:3f:3c:6a:77:3a:25:08:0b:22:f4:f7:74:b0:76:50:
8f:02:77:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:22:10 2025 by rpki-client